Select the FALSE Statement Regarding the Administrative Requirements of the HIPAA

Select the FALSE statement regarding the administrative requirements of the HIPAA privacy rule.

A) A covered entity must mitigate, to the extent practicable, any harmful effect that it becomes aware of from the use or disclosure of PHI in violation of its policies and procedures or HIPAA regulations.
B) A covered must not in any way intimidate, retaliate, or discriminate against any individual or other entity, which tiles a compliant.
C) A covered entity may not require individuals to waive their rights as a condition for treatments payment, enrollment in a health plan, or eligibility for benefits.
D) A covered entity must retain the documents required by the regulations for a period of six years.
E) A covered entity must change its policies and procedures to comply with HIPAA regulations no later than three years after the change in law.